Topic
Security
Practical online security guides — what to worry about and what to ignore.
6 articles
What is RPKI? BGP security explained
BGP runs the internet on trust. RPKI replaces some of that trust with cryptography, letting routers verify that a network actually owns the IP space it announces. Here's how it works and why deployment took fifteen years.
What is HTTPS and why does it actually matter?
HTTPS is the lock icon in your browser. Underneath it's a sequence of cryptographic steps that prevent eavesdropping, tampering, and impersonation on every web request. Here's what's going on.
What is HSTS? HTTP Strict Transport Security explained
HSTS is a small HTTP header that prevents accidental connections to HTTP, even from typed-in URLs and malicious downgrade attacks. Here's how it works, why preloading matters, and when it can lock you out of your own site.
What is a DDoS attack and how does protection actually work?
DDoS attacks flood a target with so much traffic that legitimate users can't get through. Here's how attacks work in 2026, the categories of attack, and why anycast networks make protection at scale possible.
How HTTPS certificates actually work
Every HTTPS connection starts with a server proving who it is via a certificate signed by a trusted authority. Here's the chain of trust, why Let's Encrypt changed everything, and what 'invalid certificate' warnings actually mean.
What can someone do with your IP address?
An IP address is less revealing than people think — and more revealing than you might want. Here's what someone with your IP can actually do, what they can't, and when to worry.